Update API spec to support multi-tenants